JournalismPakistan.com | Published February 23, 2019
Join our WhatsApp channel
SAN FRANCISCO - Key parts of the Internet infrastructure face large-scale attacks that threaten the global system of web traffic, the Internet's address keeper warned on Friday (February 22).
The Internet Corporation for Assigned Names and Numbers (Icann) declared after an emergency meeting "an ongoing and significant risk" to key parts of the infrastructure that affects the domains on which websites reside.
"They are going after the Internet infrastructure itself," Icann chief technology officer David Conrad told AFP.
"There have been targeted attacks in the past, but nothing like this."
The attacks could date back to 2017 but have sparked growing concerns from security researchers in recent weeks, which prompted the special meeting of Icann.
The malicious activity targets the Domain Name System or DNS which routes traffic to intended online destinations.
Icann specialists and others say these attacks have potential to snoop on data along the way, sneakily send the traffic elsewhere or enable the attackers to impersonate or "spoof" critical websites.
"There isn't a single tool to address this," Mr. Conrad said, as Icann called for an overall hardening of web defenses.
US authorities issued a similar warning last month about the DNS attacks.
"This is roughly equivalent to someone lying to the post office about your address, checking your mail, and then hand delivering it to your mailbox," the US Department of Homeland Security said in a recent cybersecurity alert.
"Lots of harmful things could be done to you (or the senders) depending on the content of that mail."
So-called "DNSpionage" attacks might date back to at least 2017, according to FireEye senior manager of cyber espionage analysis Ben Read.
The list of targets included website registrars and Internet service providers, particularly in the Middle East.
"We've seen primarily targeting of e-mail names and passwords," Mr. Read said.
"There is evidence that it is coming out of Iran and being done in support of Iran."
DNSpionage hackers appeared intent on stealing account credentials, such as e-mail passwords, in Lebanon and the United Arab Emirates, according to Mr. Adam Meyers, vice president of intelligence at CrowdStrike cybersecurity firm.
Similar attacks took place in Europe and other parts of the Middle East, with targets including governments, intelligence services, police, airlines, and the oil industry, cybersecurity specialists said.
“You definitely need knowledge of how the Internet works, and you have to handle a lot of traffic being directed to you," Mr. Meyers said of the DNSpionage hackers.
"With that access, they could temporarily break portions of how the Internet works. They chose to intercept and spy on folks."
The attack itself is technically simple, but its scope and targeting of Internet service providers along with large government entities made it "a big deal," according to Mr. Meyers.
Icann is putting out the word to website and online traffic handlers to ramp up security or leave users vulnerable to being tricked into trusting the wrong online venues.
The organization urged broader implementation of DNSSEC technology that adds digital signatures that act as virtual seals of sorts to expose when data moving online has been tampered with.
DNSSEC can also prevent Internet users from being misdirected from intended websites, according to Icann.
“It aims to assure that Internet users reach their desired online destination by helping to prevent so-called 'man in the middle' attacks where a user is unknowingly re-directed to a potentially malicious site," Icann said in the release.
Part of the challenge of keeping the Internet infrastructure safe is that website owners do not always grasp the imperative guarding against wily hackers, according to Mr. Conrad.
We want to make sure people understand what it means to own a domain name and put it on the Internet," Mr. Conrad said.
“Because all of your customers are only as secure as you are." - AFP
April 11, 2025: Sindhi journalist AD Shar was brutally murdered in Khairpur, Sindh. His body was found dumped on Handiyari Link Road. PFUJ has declared a three-day mourning period and demanded justice.
April 10, 2025: The Azad Jammu and Kashmir government has filed a case against The Daily Jammu & Kashmir and its staff for alleged fake news, drawing condemnation from PFUJ and IFJ, who demand immediate withdrawal of the FIR and an end to media repression in Pakistan.
April 08, 2025: Journalist Arzoo Kazmi alleges that Pakistan's state agencies, including the FIA, have blocked her CNIC, passport, and bank account while threatening her. She calls it a direct attack on journalism.
April 07, 2025: The Islamabad High Court has directed IG Islamabad to produce journalist Ahmad Noorani’s missing brothers, as the Ministry of Defence denies custody. SIM activity was traced in Bahawalpur, and investigations into their suspected abduction continue.
April 07, 2025: Journalist and Raftar founder Farhan Mallick has been granted bail by a Karachi court in a case concerning anti-state content aired on his YouTube channel. He still faces separate charges related to an alleged illegal call center and data theft.
April 03, 2025: Veteran journalist Ghulam Abbas Shah has joined Discover Pakistan Television as the Head of Programming. With 25 years of experience in leading news organizations, he looks forward to contributing to quality storytelling and content.
April 02, 2025: The Pakistan Federal Union of Journalists (PFUJ) has strongly condemned the visit of a group of Pakistani journalists to Israel, calling it a violation of journalistic ethics and a betrayal of press freedom and human rights. PFUJ demands a transparent investigation into the matter.
March 30, 2025: Dawn criticizes Pakistan’s plan to use TV dramas against extremism, highlighting financial and digital challenges. Can media alone solve deep-rooted issues?
April 03, 2025 The International Press Institute (IPI) and International Media Support (IMS) invite nominations for the 2025 World Press Freedom Hero and Free Media Pioneer Awards. Recognizing courageous journalists and innovative media, the awards will be presented at IPI’s 75th-anniversary World Congress in Vienna. Submit your nominations by April 30, 2025.
April 01, 2025 Photojournalist Suresh Rajak was burned alive while covering a violent protest in Kathmandu. The IFJ and its affiliates condemn the attack and call for an urgent investigation to hold the perpetrators accountable.
April 01, 2025 Assam Police arrested digital journalist Dilwar Hussain Mozumder for covering a protest against alleged corruption at Assam Co-Operative Bank. Media organizations have condemned the arrest, calling it an attack on press freedom.
March 29, 2025 A federal judge has blocked the Trump administration’s attempt to dismantle Voice of America (VOA), ruling that the move likely violated legal procedures. The decision protects over 1,200 journalists and media staff.
March 28, 2025 Turkey deports BBC journalist Mark Lowen over 'public order' threat and fines opposition TV channels covering Istanbul Mayor's arrest. Critics condemn crackdown on press freedom amid rising political tensions.